Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
File: mVehWqmJPxyRW0SX6_kqijPV5Dk.mft (raw, json)
Hash identifier: KnZQM5VdeCS4Umkuy1B2M8VuSQsU4F7M2I5HGRyxD5A=
Subject key identifier: 32:1A:E1:8D:B3:7D:37:22:C0:F4:AE:1F:3B:FA:F0:6E:A1:B4:4B:E6
Authority key identifier: 99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
Certificate issuer: /CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Certificate serial: 0197BB5969D40388225097F14AE3908375EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
Manifest number: 0A21
Signing time: Sun 29 Jun 2025 11:01:28 +0000
Manifest this update: Sun 29 Jun 2025 11:01:28 +0000
Manifest next update: Mon 30 Jun 2025 11:01:28 +0000
Files and hashes: 1: WEMws9n6rUTkd5LM4QecvMz8r_U.roa (hash: CZHPbmXmn0MVwHpVyYpkHxFw9h7//57NzIqqFrYWcd8=)
2: mVehWqmJPxyRW0SX6_kqijPV5Dk.crl (hash: 4mNY3kC3+Bv+8+EgvXPR5a1NciPMPsg2L8wM5P0Lm9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:59:69:d4:03:88:22:50:97:f1:4a:e3:90:83:75:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439
Validity
Not Before: Jun 29 11:01:28 2025 GMT
Not After : Jun 30 11:01:28 2025 GMT
Subject: CN=321ae18db37d3722c0f4ae1f3bfaf06ea1b44be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:e6:3a:3e:3d:46:54:79:cf:35:55:6a:bb:
39:17:e6:db:19:92:85:1f:c4:c3:6f:df:4f:56:82:
49:10:6e:68:53:51:d2:3c:0b:c9:74:78:54:57:77:
c9:f8:e8:85:c3:d4:cc:ea:27:46:8d:0a:c4:48:74:
82:22:ee:07:37:1c:e9:9d:24:e9:5c:08:ca:c7:d5:
38:d9:f0:0a:a1:3a:51:46:08:e7:38:e4:db:97:e4:
55:c8:1a:50:8d:ec:c0:71:ee:82:cb:38:a3:c6:c5:
04:00:48:0f:c6:3f:12:9e:c8:3f:cc:00:50:21:fd:
8d:1b:d2:4f:cb:a2:4a:50:9d:01:ef:6b:f6:e3:27:
b3:c7:ac:0f:a1:74:0e:0a:06:c8:32:17:e1:e1:c8:
6d:7a:4f:19:c5:12:c3:a8:f3:2c:48:8b:5c:61:f2:
b7:09:97:26:c8:d7:8e:fc:ca:9b:30:eb:55:b9:2a:
d3:43:ea:2d:02:58:9e:5b:b0:dc:97:76:03:e8:c6:
91:62:5e:59:ad:16:e0:e0:0f:be:cc:e2:9c:07:77:
0f:fa:66:1b:16:29:64:36:2c:bc:f0:65:28:4c:e3:
16:42:fa:c2:b5:0e:8a:d2:34:17:42:de:4b:46:15:
af:69:a3:c3:98:fe:0e:4d:fa:50:ca:86:fa:68:12:
62:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1A:E1:8D:B3:7D:37:22:C0:F4:AE:1F:3B:FA:F0:6E:A1:B4:4B:E6
X509v3 Authority Key Identifier:
keyid:99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:57:ec:ea:bc:b1:83:c5:1f:17:3a:8e:64:0e:be:83:c9:7e:
8e:f2:22:8e:65:56:cf:59:4b:97:3c:ea:e2:fe:68:24:3f:19:
a1:26:e6:79:6a:1c:88:d3:ec:01:42:cf:8e:23:cd:ea:5d:b8:
6a:d0:b8:ce:63:4e:1d:9c:58:c2:2e:c6:db:0d:0c:a1:51:c9:
34:9f:63:82:ff:7e:0e:74:32:fb:7a:b4:fb:3a:56:01:24:ae:
e0:65:b6:b6:98:dd:20:cc:7d:e8:21:7e:e4:76:ac:0a:d1:2b:
6f:b4:6e:1f:eb:69:34:01:f7:cd:9f:94:f7:51:fb:8a:db:67:
93:87:f1:9e:12:9f:a0:c3:9f:70:a4:44:14:9d:53:28:38:8d:
48:9e:71:06:7d:62:e8:94:b0:70:df:16:67:50:86:40:f9:0a:
11:3d:9b:eb:8d:8b:6c:65:89:c8:7c:0f:af:dc:8f:7a:23:d1:
44:d3:88:ba:d5:45:d0:9e:23:ee:07:96:e4:92:97:95:23:28:
8e:8d:bb:ce:4d:7e:9a:28:54:e4:9b:72:3a:25:4f:a0:a9:b7:
6f:e6:55:e3:c8:f7:51:b6:6c:23:a0:28:38:ed:67:8c:0f:2f:
92:a5:97:e7:20:52:88:8a:04:a7:52:b3:a3:58:2c:e9:0c:52:
4c:76:ad:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:46:33 2025 by rpki-client